CVE-2026-71187 Ebyte NA111-M Use of Client-Side Authentication

The Ebyte device relies on client side authentication logic that can be reproduced by unauthenticated users. An attacker may generate valid authentication requests and bypass authentication to obtain administrative access to the device...

CVE-2026-73125

Ebyte NE2-D11 devices are affected by a missing authentication flaw in the web management interface . The interface does not consistently enforce authentication before granting access to administrative functionality, allowing an unauthenticated remote attacker to read sensitive configuration data...

CVE-2026-73125 Ebyte NA111-M Missing Authentication for Critical Function

Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated remote attacker could access sensitive configuration information, modify device settings, or disrupt availability...

CVE-2026-73125 Ebyte NA111-M Missing Authentication for Critical Function

Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated remote attacker could access sensitive configuration information, modify device settings, or disrupt availability...

Berserko

Berserko - Kerberos-Authentifizierung für Burp Suite Als Open Source veröffentlicht von NCC Group Plc - http://www.nccgroup.trust/ Entwickelt von Richard Turnbull, richard dot turnbull at nccgroup dot com http://www.github.com/nccgroup/Berserko Veröffentlicht unter der AGPL, siehe LICENSE für...

CollaboratorPlusPlus

CollaboratorPlusPlus Als Open Source veröffentlicht von NCC Group Plc - http://www.nccgroup.com/ Entwickelt von Corey Arthur, [email protected] http://www.github.com/nccgroup/CollaboratorPlusPlus Dieses Projekt wird unter der AGPL veröffentlicht; weitere Informationen finden Sie in der...

ImpossibleTravelLogAnalysis

Analisi dei Log di Viaggio Impossibile di NCC Group Informazioni Strumento di analisi dei log di base per rilevare viaggi impossibili tramite informazioni geografiche dell'indirizzo IP Formato Dati Previsto Un file CSV con le seguenti intestazioni root@kitploit: When,User,Event,IP Con il seguente...

CVE-2026-24061

🔒 CVE-2026-24061 - Sfrutta il Difetto Critico di Autenticazione 🚀 Per Iniziare Benvenuto nel progetto CVE-2026-24061. Questa applicazione dimostra un difetto di sicurezza critico. Consente agli attaccanti di aggirare l'autenticazione in GNU inetutils-telnetd. Questa README ti guiderà attraverso i...

CVE-2026-39944 Ceph: CephX AES Authentication error

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the RADOS Gateway RGW protects STS session tokens with an AES-128-CBC handler that provides no message authentication, allowing an attacker who holds any valid ST...

kentico-xperience13-AuthBypass-wt-2025-0011

WT-2025-0011 CVE noch nicht vergeben Kentico Xperience 13 CMS - Staging Service Authentifizierungsumgehungs-Check Erkennung in Aktion root@kitploit: python3 .\watchTowr-vs-kentico-xperience13-AuthBypass-wt-2025-0011.py -H http://labcms -u admin / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / /...

kentico-xperience13-AuthBypass-wt-2025-0006

WT-2025-0006 CVE noch nicht vergeben Kentico Xperience 13 CMS - Prüfung auf Authentifizierungs-Bypass des Staging-Dienstes Erkennung in Aktion root@kitploit: python3 watchTowr-vs-kentico-xperience13-AuthBypass-wt-2025-0006.py -H http://labcms / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / /...

CVE-2025-30156 Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication protocol encrypts tickets with AES-128-CBC in an unauthenticated mode that uses a hard-coded initialization vector and no message...

CVE-2025-30156

CVE-2025-30156 affects the Ceph distributed storage platform in versions prior to 20.2.4 (Tentacle) and 19.2.6 . The CephX authentication protocol encrypts tickets with AES-128-CBC using a hard-coded IV and no message authentication, making it vulnerable to the same class of unauthenticated-encry...

SecureConnect-Auth-Bypass

ConnectWise SecureConnect – Schwachstelle bei der Authentifizierungsumgehung Ein Exploit-Proof-of-Concept für die Schwachstelle bei der Authentifizierungsumgehung von ConnectWise SecureConnect. Blog-Beitrag Mehr Details hier:...

bigip-scanner

BIG-IP Scanner Определение версии программного обеспечения удалённого интерфейса управления F5 BIG-IP. Разработано с ❤️ командой Bishop Fox Cosmos. Описание CVE-2022-1388 — критическая уязвимость в интерфейсе управления F5 BIG-IP, которая позволяет злоумышленнику обойти аутентификацию и удалённо...

CVE-2025-20362-Cisco-Scanner

CVE-2025-20362 Scanner Ein sicherer, nicht-destruktiver Python-Scanner für Cisco ASA / FTD WebVPN Authentifizierungsumgehung CVE-2025-20362. CVE-2025-20362 ermöglicht nicht authentifizierten Angreifern, die Authentifizierung zu umgehen und auf eingeschränkte WebVPN-Ressourcen durch...

CVE-2022-26134

CVE-2022-26134 Iniezione Object-Graph Navigation Language OGNL pre-autenticazione in Confluence Confluence è un prodotto di collaborazione workspace basato sul web sviluppato da Atlassian. Può essere distribuito on-prem o come parte di Atlassian Cloud. È composto da 3 funzionalità chiave: pagina,...

cve-2024-56348

JetBrains TeamCity Authentifizierungs-Bypass + RCE CVE-2024-56348 PoC 📜 Beschreibung CVE-2024-56348 ist eine kritische Authentifizierungs-Bypass-Schwachstelle in JetBrains TeamCity on-premises , die alle Versionen vor 2024.12 betrifft. Die REST-API verarbeitet Anfragen an Pfade, die ;.jsp...

Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization

Summary IBM Financial Transaction Manager for RedHat OpenShift has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2025-68121 DESCRIPTION: During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial...

WSGoat

WebSocket GOAT एक जानबूझकर कमजोर, Dockerized WebSocket एप्लिकेशन जो नियंत्रित वातावरण में WebSocket सुरक्षा परीक्षण सीखने और अभ्यास करने के लिए डिज़ाइन किया गया है। यह लैब प्रमाणीकरण, निजी संदेश, उपयोगकर्ता प्रोफ़ाइल और कई WebSocket एंडपॉइंट्स के साथ एक यथार्थवादी वेब एप्लिकेशन लागू करता है।...